毕业论文—基于greoveripsecvpn设计与仿真.doc

摘 要 人类社会已经进入21世纪，计算机信息网络已深入到世界的各个角落，地域、国家、政府、企业甚至家庭。计算机网络的飞速发展给人来带来了诸多便利，而然其潜在的网络信息安全威胁也弥漫在各个领域。 本课题设计与论述的是关于网络安全中常用的一种技术——虚拟专用网（VPN）技术。该技术的主要作用：将不在同一区域的内网之间，通过在互联网中建立一种安全隧道，使得内网数据流安全地穿越互联网，而不被外网用户获悉，从而保证内网之间的数据通信安全地穿越互联网。 本课题所探讨的VPN技术则是建立在GRE over IPSec技术之上，并通过合肥百大集团的网络拓扑对其进行设计与仿真。 GRE over IPSec VPN技术是通过GRE与IPSec相结合，而形成的一种安全性更好VPN技术，其主要借用IPSec的安全加密和GRE支持多播的优点，从而使得VPN网络更加安全。该项技术的主要工作原理：将一个完整的组播、广播数据包或非IP数据包封装在一个单播数据包（IPSEC）里，以处理如OSPF的组播或 RIP的广播数据流，以完成在IPSec隧道里通信实体之间的动态路由学习。 关键字：网络安全，VPN，IPSec，GRE，动态路由协议（具体是OSPF协议） Abstract The human society has entered the 21st century, and the computer information network has penetrated every corner of the world, regional, state, government, businesses and even families. The rapid development of computer networks has brought much convenience to people, and then the potential security threat network information filled in the various fields. Design and discussion of the topic is about a kind commonly used in network security technologies - virtual private network (VPN) technology. The main function of the technology: the network is not within the same region between the Internet by establishing a secure tunnel so that data flows within the network through the Internet safely without the user was informed by external network, thus ensuring the network between secure data communications through the Internet. The topics are discussed in VPN technology is built on top of GRE over IPSec technology, and through Hefei Baida Group to design their network topology and simulation. GRE over IPSec VPN technology is through the combination of GRE and IPSec, and the formation of a better VPN security technology, its main borrowing GRE IPSec encryption and security advantages of multicast support, which makes the network more secure VPN. The main working principle of the technology: a complete multicast, broadcast packets or IP packets are encapsulated in a unicast packet (IPSEC) in order to deal with, such as OSPF or RIP broadcast multicas